Age | Commit message (Expand) | Author |
2006-09-19 | Use S_IS* macros insted of masking with S_IF* flags. The latter may | Otto Moerbeek |
2006-07-02 | sync with systrace 1.6d, keeping local changes | Nikolay Sturm |
2006-04-26 | ARGSUSED and a FALLTHROUGH to please lint | Nikolay Sturm |
2006-03-06 | convert permanent privilege revocation to use setresuid/setresgid; | Damien Miller |
2004-07-07 | fix an issue when scripts are exec'd under systrace where | marius eriksen |
2004-06-24 | if we have detached after an exec, bail out early, and avoid a double free. | marius eriksen |
2004-06-23 | a few fixes to systrace | marius eriksen |
2004-03-30 | if a string considered a filename is too long, don't exit but just let | Nikolay Sturm |
2004-01-30 | The empty filename does not receive normalization. | Nikolay Sturm |
2003-10-18 | typos from Jared Yanovich; | Jason McIntyre |
2003-10-08 | originally from cb@openbsd.org, adapted by provos | Nikolay Sturm |
2003-08-04 | several diffs from Niels as applied to NetBSD | Nikolay Sturm |
2003-07-19 | - sync with NetBSD or Niels' tarball where appropriate | Nikolay Sturm |
2003-06-16 | - limited number of processes per systrace | Jun-ichiro itojun Hagino |
2003-05-17 | pull in a bugfix from systrace-current to let systrace deal with creating | Nikolay Sturm |
2003-02-20 | Fix a crash in the systrace found by form@ | Artur Grabowski |
2002-12-09 | prevent the use of permit for aliases. from provos | Jun-ichiro itojun Hagino |
2002-11-26 | performance improvement by omitting a redundant getcwd. | Jun-ichiro itojun Hagino |
2002-11-12 | fix bug in determining execve name. from provos | Jun-ichiro itojun Hagino |
2002-10-17 | little cleanup (intercept_getpid dies within the function on error). | Jun-ichiro itojun Hagino |
2002-10-16 | support for privilege elevation. | Jun-ichiro itojun Hagino |
2002-10-09 | predicates are part of the grammar now; in non-root case, predicates are | Jun-ichiro itojun Hagino |
2002-09-17 | daemon should not change the directory. from provos | Jun-ichiro itojun Hagino |
2002-09-06 | standalone ; at top scope is illegal in ansi c | Theo de Raadt |
2002-08-28 | fix systrace with chroot. from provos | Jun-ichiro itojun Hagino |
2002-08-08 | if getcwd fails and we continue dont restcwd. | Niels Provos |
2002-08-07 | deal better with interrupted system calls | Niels Provos |
2002-08-05 | uid and gid are not guaranteed to be aligned on a register_t sized boundary. | Jason Wright |
2002-08-05 | increase buffer size for getstring, useful for execve arguments. | Niels Provos |
2002-08-04 | keep track of ppid and allow matching rules to be logged via syslog. | Niels Provos |
2002-08-02 | performance improvement, reduces number of ioctl calls | Niels Provos |
2002-08-01 | correctly separate execve argv arguments. increase buffer size for | Niels Provos |
2002-08-01 | the last component in a filename for unlink may be a symlink | Niels Provos |
2002-07-30 | sometimes no-return syscalls (execve) emit errno < 0. ignore them. | Jun-ichiro itojun Hagino |
2002-07-30 | solve a problem with realpath when the last component of the path is | Niels Provos |
2002-07-22 | add seqnr to message from kernel, userland needs to quote correct seqnr. | Niels Provos |
2002-07-19 | constify, have missing prototypes, use pedantic compilation options. | Jun-ichiro itojun Hagino |
2002-07-16 | internal uid/gid tracking. permit can not detach systrace, useful for | Niels Provos |
2002-07-12 | some clean up. install argument replacements only if we are going to | Niels Provos |
2002-07-10 | make it work with chroot | Niels Provos |
2002-07-10 | do not close fds in daemon. | Niels Provos |
2002-07-09 | allow systrace to run in the background if possible so that the executed | Niels Provos |
2002-07-09 | support for system call aliasing. stat/fstat/readlink/access etc... gets | Niels Provos |
2002-07-09 | Potential off-by-five, ok provos@ | Daniel Hartmeier |
2002-07-07 | missing error checks on strdup. from cloder@acm.org | Niels Provos |
2002-06-28 | KNF | Theo de Raadt |
2002-06-21 | rewrite all system call arguments in the permit case. use realpath | Niels Provos |
2002-06-19 | more careful buffer handling; pointed out by deraadt@ | Niels Provos |
2002-06-10 | support attaching to a running process; some code by fries@ | Niels Provos |
2002-06-04 | complain about missing device only once. from deraadt@ | Niels Provos |